github gastownhall/beads v1.3.3-rc.1

pre-release3 hours ago

beads v1.3.3-rc.1

Pre-compiled binaries for Linux, macOS (Intel & Apple Silicon), Windows (AMD64 & ARM64), Android/Termux (ARM64), and FreeBSD.

Installation (release candidate)

This is a prerelease for validation. The stable install channels —
Homebrew, the install.sh / install.ps1 scripts, npm, and PyPI —
intentionally keep serving the latest stable release, so they will not
install this RC. Use one of the methods below.

Manual download (recommended):
Download the archive for your platform from the Assets below, extract it,
and place bd on your PATH.

Go install (pinned to this RC):

go install github.com/steveyegge/beads/cmd/bd@v1.3.3-rc.1
# For embedded Dolt support:
CGO_ENABLED=1 GOFLAGS=-tags=gms_pure_go go install github.com/steveyegge/beads/cmd/bd@v1.3.3-rc.1

When you are done validating, return to the stable release through your normal
channel (e.g. brew upgrade beads).

Changelog

Bug Fixes

  • 9ab6b0f fix(compact): keep writes that reach main while bd compact runs (supersedes #7789) (#8046)
  • f4cefa7 fix(compact): refuse out-of-order date partitions and verify the replay (#6645) (#8050)
  • 35bed4a fix(compact): replay cherry-picks in commit_order, not commit date (#6644)
  • 181bf12 fix(dbproxy): managed-local dolt readiness proves port ownership; recover onto a free port (#7184)
  • 998bbfe fix(delete): resolve ids exactly, never by prefix abbreviation (#7375)
  • baef293 fix(deps): bump kin-openapi to 0.149.0 (#7812)
  • 582d167 fix(deps): bump opentelemetry-api to 1.45.1 in beads-mcp (#7813)
  • 4ded429 fix(doctor): delete only what one positive-ownership plan marks safe, never a database (#7828)
  • 5c8b572 fix(doctor): import issues.jsonl only into a database the repair created or found with no issues (#7899)
  • 4cedba1 fix(dolt): reset-data refuses a file:// remote whose directory is a git repository (#7902)
  • dcff575 fix(github): scope issue sync to the configured repository (supersedes #7794) (#8068)
  • 5000170 fix(mcp): bump fastmcp to 3.4.11 for GHSA-7xgj-8392-5q4r and the certifi eMudhra floor (backport of #7814)
  • 4f6b8c4 fix(mcp): bump joserfc to 1.7.7 and mcp to 1.30.0 for OSV advisories
  • 3dbe0e5 fix(rules): compact previews unless --force and backs up before deleting (#8051)
  • 8d300a3 fix(schema): keep issue and wisp updated_at across frozen migrations (#5981)
  • 578d0a2 fix(security): block executable settings from .beads/.env and workspace API (#7879)
  • 69d4784 fix(security): pass-3 dependency and toolchain updates (eMudhra follow-up + Oct-27 advisories) (#7925)
  • 2888fe6 fix(security): stop option injection via sync remotes and beads-mcp argv
  • 83fe9cc fix(test): retry contended migration lock when re-running schema init on the shared test DB (#7235)

Others

  • 4407949 fix(beads-mcp): bump pyjwt to 2.15.1 and urllib3 to 2.8.0 for security advisories (#7466)
  • 0da2c35 perf(schema): probe columns with SHOW COLUMNS in the updated_at migration guard
  • 8922726 refactor(cli): move the historical SQLite classifier into internal/historicalsqlite (#7797)
  • a0cbed7 release(notes): correct v1.3.3-rc.1 notes from the accuracy review
  • ff29f30 release(notes): fix v1.3.3-rc.1 security, github and credit notes from the second review
  • 867f9da release(notes): scope the carried-forward recompute-blocked note as 1.3.2 does
  • fc55f68 release: prep v1.3.3-rc.1
  • 0b2b1dd test(dolt): retry branch-local schema init on migration-lock contention (#7145)

Don't miss a new beads release

NewReleases is sending notifications on new releases.